Skip to content
OpenAdvisories
Medium · 5.3 CVE-2019-14273 EUVD-2020-0534GHSA-43jj-2rwc-2m3f

Broken access control on files

Published Sep 26, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Package: silverstripe/framework Ecosystem: Packagist

Description

In SilverStripe assets 4.0, there is broken access control on files.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist silverstripe/framework >= 4.0.0, < 4.3.5 4.3.5 GHSA-43jj-2rwc-2m3f
Packagist silverstripe/framework >= 4.4.0, < 4.4.4 4.4.4 GHSA-43jj-2rwc-2m3f

References